文章介绍:本篇主要介绍在华为交换机中怎么配置DHCPv6无状态下发IPv6地址,主要应用场景是,企业需要使用ipv6进行业务测试,比如谷歌兼容性测试套件CTS,对IPv6网络要求就比较严格,经过调试测试,总结出这篇指导性文章,仅供参考。

一、网络拓扑

ipv4-and-ipv6

二、拓扑说明

  • 华为AR路由器作为出口网关对接运营商,配置nat等基础网络配置;
  • 华为核心交换机作为用户的网关,配置dhcpv4和dhcpv6,策略路由等基础网络配置;
  • 华为无线控制器AC管理无线AP,配置多SSID,提供用户无线接入;
  • 加速路由器Router,旁挂核心交换机,路由ipv6地址给华为核心交换机,同时配合华为核心交换机配置的策略路由实现ipv4海外加速需求。

三、华为核心交换机配置

特殊场景下如果需要安卓手机通过谷歌兼容性测试套件CTS,则dns-server 2001:4860:4860::8888(这个dns是谷歌的ipv6dns)不能配置,需要将ip pool vlan40的dns-list改成8.8.8.8和8.8.4.4,否则电脑都是ipv6检测通过,但是安卓手机谷歌CTS检测工具一直是失败的。

ipv6
#
vlan batch 30 40 200 1000
#
dhcp enable
#
acl number 3000
 rule 1000 permit ip source 172.16.30.0 0.0.0.255
 rule 1001 permit ip source 172.16.40.0 0.0.3.255
#
traffic classifier acl3000 operator or
 if-match acl 3000
#
traffic behavior to-router
 permit
 redirect ip-nexthop 172.16.200.254 track-nqa icmp router
#
traffic policy to-router atomic
 classifier acl3000 behavior to-router
#
ip pool vlan30
 gateway-list 172.16.30.254
 network 172.16.30.0 mask 255.255.255.0
 dns-list 223.5.5.5 223.6.6.6
#
ip pool vlan40
 gateway-list 172.16.40.254
 network 172.16.40.0 mask 255.255.252.0
 dns-list 223.5.5.5 223.6.6.6
#
dhcpv6 pool 40fastipv6
 address prefix 2059:470:11E:26::/64
 excluded-address 2059:470:11E:26::1
 dns-server 2001:4860:4860::8888
#
interface Vlanif30
 description youxian
 ip address 172.16.30.254 255.255.255.0
 dhcp select global
#
interface Vlanif40
 description wuxain
 ipv6 enable
 ip address 172.16.40.254 255.255.252.0
 ipv6 address 2059:470:11E:26::1/64
 undo ipv6 nd ra halt
 ipv6 nd autoconfig managed-address-flag
 ipv6 nd autoconfig other-flag
 dhcp select global
 dhcpv6 server 40fastipv6
#
interface Vlanif200
 description hulian
 ip address 172.16.200.1 255.255.255.0
#
interface Vlanif1000
 ipv6 enable
 ipv6 address FC00::8000:0:0:2/126
#
interface GigabitEthernet0/0/1
 description to-PC
 port link-type access
 port default vlan 30
 stp edged-port enable
 traffic-policy to-router inbound
#
interface GigabitEthernet0/0/22
 description to-Router
 port link-type trunk
 port trunk allow-pass vlan 200 1000
#
interface GigabitEthernet0/0/23
 description To-AC
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 40
#
interface GigabitEthernet0/0/24
 description To-AR
 port link-type trunk
 port trunk allow-pass vlan 30 40 200 1000
#
ip route-static 0.0.0.0 0.0.0.0 172.16.200.2
#
ipv6 route-static :: 0 Vlanif1000 FC00::8000:0:0:1
#
nqa test-instance icmp router
 test-type icmp
 destination-address ipv4 172.16.200.254
 source-address ipv4 172.16.200.1
 frequency 20
 probe-count 2
 start now

四、Router加速路由器配置

set interfaces ethernet eth0 vif 200 address '172.16.200.254/24'
set interfaces ethernet eth0 vif 1000 address 'fc00:0:0:0:8000::1/126'
set interfaces ethernet eth0 vif 1000 ipv6 dup-addr-detect-transmits 1
set interfaces tunnel tun1 address '2059:dc2:2a00:fdff::106/126'
set interfaces tunnel tun1 encapsulation 'sit'
set interfaces tunnel tun1 multicast 'disable'
set interfaces tunnel tun1 parameters
set interfaces tunnel tun1 remote '12.12.12.12'
set interfaces tunnel tun1 source-address '3.3.3.3'
set protocols static route6 2059:470:11e:26::/64 next-hop fc00::8000:0:0:2
set protocols static route6 ::0/0 next-hop 2059:dc2:2a00:fdff::105

五、华为POE交换机配置

ipv6

六、华为AC无线控制器配置

wlan
sta-ipv6-service enable

七、失败截图

Image 1 Image 2 Image 3

八、成功截图

yydy_2024-04-08_15-49-57

九、ipv6测试网站

test-ipv6.com
ipv6-test.com
ipv6test.google.com

十、谷歌兼容性测试套件

兼容性测试套件下载